CVE-2013-4251: SciPy creates insecure temporary directories – CVSS 7.8 · Watchpost

← All vulnerabilities

SciPy creates insecure temporary directories

ALTO 7.8CVE-2013-4251 · GHSA-xp76-357g-9wqq · PYSEC-2019-156 · Published 04/11/2019 · updated 16/06/2026

Em resumo

CVE-2013-4251 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta scipy, scipy (scipy).
Chance de exploração nos próximos 30 dias (EPSS): 0.43%, maior que 37.2% das vulnerabilidades.
Correção: atualize para 0.12.1 ou posterior.

Package	Affected versions	Patched versions
scipy PyPI	`< 0.12.1`	`0.12.1`
scipy scipy	`< 0.12.1`	`0.12.1`

Description

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

NVD description

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

References

nvd.nist.gov/vuln/detail/CVE-2013-4251 · ADVISORY
scipy/scipy commit bd296e0 · WEB
access.redhat.com/security/cve/cve-2013-4251 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
bugzilla.suse.com/show_bug.cgi · WEB
exchange.xforce.ibmcloud.com/vulnerabilities/88052 · WEB
pypa/advisory-database · WEB
scipy/scipy · PACKAGE
security-tracker.debian.org/tracker/CVE-2013-4251 · WEB
lists.fedoraproject.org/pipermail/package-announce/2013-November/120696.html · WEB
lists.fedoraproject.org/pipermail/package-announce/2013-October/119759.html · WEB
lists.fedoraproject.org/pipermail/package-announce/2013-October/119771.html · WEB
securityfocus.com/bid/63008 · Third Party Advisory
GitHub Advisory GHSA-xp76-357g-9wqq · ADVISORY

Mais vulnerabilidades de scipy

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free